Nintendo Switch 2 Jailbroken Using AI: First Software-Only Exploit Unlocks Custom Mods

Developer Cracks Nintendo Switch 2 Security With AI Assistance

Developer Sammy Hajhamid, known online as pepsipu, has successfully executed the first jailbreak of the Nintendo Switch 2, leveraging OpenAI's Codex to break through the console's security measures.1

1

The exploit, dubbed ns2jb, represents a significant milestone in console hacking, demonstrating how AI tools are reshaping security research and homebrew development.2

2

The software-only exploit runs on firmware version 23.0.1, the latest available version at the time of the jailbreak's announcement.3

3

To showcase the breakthrough, Hajhamid modified Mario Kart World to include unconventional playable characters including Peter Griffin from Family Guy, Hatsune Miku, Sanrio's Cinnamoroll, Steve from Minecraft, and the red Angry Bird.1

1

How OpenAI's Codex Enabled the Switch 2 Jailbreak

The development process took approximately two weeks of substantial effort, with Codex playing a meaningful role throughout.2

2

Hajhamid created an elaborate testing environment that allowed the AI to interact directly with both Switch 1 and Switch 2 consoles. "The very first thing I did was set up a harness around the Switch 1 and 2 so Codex could, ideally, jailbreak the Switch 2 without me," Hajhamid explained in a detailed blog post.2

2

The setup included JetKVMs that enabled Codex to send controller inputs via USB and receive video output over HDMI. Hajhamid even incorporated a Bluetooth light switch flicker from Amazon to allow the AI to press the power button remotely when the console crashed.2

2

This wasn't a simple one-click operation—the AI-assisted hacks required significant human oversight and technical expertise.3

3

SmileBASIC 4 Becomes the Vulnerability Gateway

Initially, Codex explored exploiting the Switch 2's WebKit-based browser, but that approach proved unsuccessful.2

2

The breakthrough came through SmileBASIC 4, a $25 eShop application designed as a game-building tool.2

2

Codex identified an integer overflow vulnerability within SmileBASIC 4 that provided the initial foothold needed to exploit the console's filesystem services.2

2

The choice of SmileBASIC 4 wasn't random—Codex likely targeted it because the application had been used in previous exploits, making it a known weak point in Nintendo's security architecture.2

2

However, another modder has suggested that SmileBASIC 4 is "not strictly needed" for the exploit to function, indicating potential alternative pathways.1

1

Understanding the Tethered Jailbreak Limitations

The ns2jb exploit is classified as a tethered jailbreak, which introduces significant practical limitations.1

1

Users must run the exploit from a game every time they power on the console for it to work.1

1

When the console shuts down, all jailbreak functionality is lost and must be re-triggered.3

3

This isn't a full kernel-level jailbreak or permanent custom firmware solution that modders ultimately seek.2

2

The exploit allows native code execution with the permissions of ordinary system modules and the built-in filesystem module, creating opportunities for homebrew development, custom game modifications, save-file backups, reverse engineering, and further security research.3

3

Nintendo's Expected Response and Future Implications

Nintendo will likely respond swiftly to this security breach. Experts anticipate the company will pull SmileBASIC 4 from the eShop and release a firmware patch to close the vulnerability.2

2

Given Nintendo's aggressive legal history regarding unauthorized modifications, the window for exploiting this vulnerability may be extremely brief.2

2

The full impact of this jailbreak remains unclear, with users on the Switch 2 hacks subreddit actively debating its significance.1

1

While the exploit still seems extremely complex for most people, it could mark the beginning of a string of exploits for the Switch 2, especially as modders increasingly leverage AI tools for security research.1

1

This development arrives shortly after a PlayStation 5 jailbreak was released, suggesting a broader trend of AI-assisted security research targeting modern gaming consoles.2

2

The bigger takeaway is that AI isn't magically cracking consoles autonomously—it's becoming another weapon in the researcher's toolkit, helping transform weeks of painstaking security work into tangible progress.3

3